
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3136382e302f32322d3232203d3e203137373735.roa
File: 3132322e3134342e3136382e302f32322d3232203d3e203137373735.roa (raw, json)
Hash identifier: BWQqkQFM2pkKQFvCI0Cs2fMc4tdLV+OxXLO7gYeRjY4=
Subject key identifier: 3C:FB:46:2A:C6:A9:8C:BE:F3:C2:80:5B:55:5B:E3:9E:85:D2:08:A8
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 13F65BCDAE8D520B50EA01EB1AD0CFA576C43592
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3136382e302f32322d3232203d3e203137373735.roa
Signing time: Wed 17 Jun 2026 08:14:54 +0000
ROA not before: Wed 17 Jun 2026 08:09:54 +0000
ROA not after: Wed 16 Jun 2027 08:14:54 +0000
asID: 17775
IP address blocks: 122.144.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f6:5b:cd:ae:8d:52:0b:50:ea:01:eb:1a:d0:cf:a5:76:c4:35:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 17 08:09:54 2026 GMT
Not After : Jun 16 08:14:54 2027 GMT
Subject: CN=3CFB462AC6A98CBEF3C2805B555BE39E85D208A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:86:b1:97:03:00:63:09:12:9c:3c:c8:6b:
b3:4f:68:13:25:01:dd:fd:86:56:84:22:bd:13:cf:
75:ac:66:66:3c:05:3c:00:2a:c9:00:da:12:d2:2f:
20:71:c0:fb:6a:74:49:52:d5:c0:fc:19:52:0e:5c:
3a:4c:cc:7b:84:a3:61:0c:5f:33:00:0b:67:ff:52:
39:98:22:62:11:bb:b0:68:66:17:4a:84:61:0b:d7:
de:d6:f3:f7:44:6a:1f:ca:35:6c:54:67:6d:25:09:
df:f6:09:73:5b:e5:23:13:88:06:c3:f0:ce:8b:80:
c5:ca:6e:5a:17:23:29:94:d0:16:d0:1c:be:37:d7:
29:6a:5e:75:2c:ce:2e:06:74:41:91:eb:fb:70:d0:
ae:b6:f0:d1:8c:2c:40:66:e5:1f:9d:04:0b:87:a1:
27:e4:64:38:e8:1d:7c:6f:1f:03:5c:f9:c8:2f:bf:
fc:25:f8:f5:49:c2:0d:f9:fb:84:0f:5c:38:e9:ee:
6c:5e:b3:10:d2:8c:5d:e1:8b:d9:06:be:6c:b8:f6:
fd:e3:8a:64:d6:12:d6:77:50:fa:de:10:69:6f:69:
82:9a:cd:52:94:d2:77:01:33:fc:b5:d0:70:4a:6c:
a9:be:b1:37:25:a0:73:c1:3c:34:d9:83:07:7b:05:
8d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FB:46:2A:C6:A9:8C:BE:F3:C2:80:5B:55:5B:E3:9E:85:D2:08:A8
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3136382e302f32322d3232203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.144.168.0/22
Signature Algorithm: sha256WithRSAEncryption
99:21:de:27:9d:fb:83:fc:70:d5:30:ab:65:c5:fc:16:4c:49:
a1:3a:f9:a1:e3:8d:60:ec:a3:22:5b:50:e3:9f:43:f5:e6:b7:
31:9f:88:5b:ec:92:56:55:6e:85:79:3f:5f:3d:ef:9e:44:5e:
d8:44:fa:4d:36:2c:94:37:67:ee:98:1d:41:e3:0c:a4:3a:f4:
ed:aa:39:6b:08:cd:92:c9:65:97:ab:be:6c:73:fd:cc:2c:4b:
ec:90:de:2c:96:82:80:8a:68:81:63:e9:df:f7:63:61:c6:2e:
66:20:32:15:20:5a:49:8b:96:b9:43:53:c9:d0:7c:c9:c9:90:
4c:05:d9:62:96:e7:2c:4d:d3:8a:b2:65:35:0f:70:a7:9c:46:
2a:ae:91:7a:99:cd:3c:ec:9a:19:98:6e:35:7e:8d:58:4e:35:
7a:14:25:35:c1:f2:f0:64:90:cd:f5:a3:de:11:2a:56:55:a2:
55:28:1b:07:31:51:da:f6:57:1e:54:89:20:b0:c6:b8:b1:ca:
4e:21:74:7e:35:bb:2a:0e:4f:fe:72:22:38:06:f6:0f:82:fe:
a6:ec:c2:c7:af:87:0b:b7:a0:94:f3:6b:3d:d7:68:9b:7a:5c:
5f:ec:dd:18:c2:57:d3:8b:d5:f7:73:9b:15:bb:bf:92:c4:5a:
3d:f7:60:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:56:46 2026 by rpki-client